> On the other hand, I bet there are plenty more vulnerabilities in Windows 11 that still haven't been discovered yet.
There probably are, but I'd rather have a bunch of vulnerabilities that nobody knows about yet, and that will be patched once people do learn, than slightly fewer vulnerabilities that everyone is constantly trying to exploit and that will be there forever.
That means vendors should be legally forced to publish source code of any software they abandon / stoped providing support. Hope this will happen soon. Regarding Windows XP, full source code has been leaked already (not SP3 but close to recent).
Don't be so certain --- the enthusiast community will fix them if they're important enough, even more so if they're ones that "everyone is constantly trying to exploit". Also, no one who knows what they're doing is going to be facing the Internet without a NAT or firewall that blocks incoming connections by default.
There probably are, but I'd rather have a bunch of vulnerabilities that nobody knows about yet, and that will be patched once people do learn, than slightly fewer vulnerabilities that everyone is constantly trying to exploit and that will be there forever.